Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

L5 Sessionator

Hi @E_Ramier755 ,


Thank you for writing to live community!


Assuming you are mentioning for prevention policy rules, we do not support or have implemented a feauture for temporary allow list/ exception as this is centred around implementation of execution control in the environment. In Cortex XDR realm, we generally create exceptions for allowing executions for certain applications which is being treated as a false positive and the detection logic more or less would remain the same(except in special reported cases) for execution. As a result, we do not have a feature for temporary whitelists or exceptions for prevention policy rules.


Hope this helps. Please mark the response as "Accept as Solution" if this helps.

View solution in original post

Who rated this post